Privacy Policy

1. Data Protection Compliance

PHYCOMANIA PLC is committed to protecting your privacy and ensuring that your personal data is protected in accordance with:

• The Data Protection Act, 2019 of Kenya
• The Constitution of Kenya, 2010
• Relevant data protection regulations and guidelines issued by the Office of the Data Protection Commissioner (ODPC)

We implement appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information.

2. Data Controller

For any data protection inquiries or to exercise your rights under the Data Protection Act, please contact us at the above address or email.

3. Personal Information We Collect

In compliance with the Data Protection Act, 2019, we collect and process personal data lawfully, fairly, and in a transparent manner. We may collect personal identification information when users:

• Visit our site
• Register on the site
• Place an order
• Fill out a form
• Subscribe to our newsletter
• Contact customer service

The types of personal data we collect include:

• Full name
• Email address
• Physical address for delivery
• Phone number
• Payment information (processed securely by payment gateways)
• IP address and browser information
• Order history and preferences

4. How We Use Your Information

PHYCOMANIA PLC collects and uses users' personal information for the following purposes in accordance with Section 31 of the Data Protection Act:

• To process transactions: To process and fulfill your orders, including sharing necessary information with our logistics partners for delivery
• To improve customer service: Your information helps us respond to your customer service requests more efficiently
• To personalize user experience: We may use information to understand how our users as a group use the services and resources on our site
• To improve our site: We continually strive to improve our website offerings based on the information and feedback we receive from you
• To send periodic emails: The email address users provide for order processing will be used to send them information and updates pertaining to their order
• To comply with legal obligations: Including tax reporting requirements under Kenyan law

5. How We Protect Your Information

We adopt appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information, username, password, transaction information, and data stored on our site.

Our security measures include:

• Secure socket layer (SSL) technology to encrypt sensitive information
• Regular security assessments and updates
• Access controls and authentication procedures
• Secure payment gateway integration
• Regular staff training on data protection

Sensitive and private data exchange between the site and its users happens over an SSL secured communication channel and is encrypted and protected with digital signatures.

6. Sharing Your Personal Information

We do not sell, trade, or rent users' personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners and advertisers for the purposes outlined above.

We may share your personal data with third parties only in the following circumstances:

• With service providers who assist in operating our business and website
• With logistics and delivery partners to fulfill your orders
• With payment processors to complete transactions
• When required by law or to comply with legal processes
• To protect the rights, property, or safety of PHYCOMANIA PLC, our users, or others

All third-party service providers are required to maintain the confidentiality and security of your personal information and are prohibited from using it for any other purpose.

7. Your Rights Under the Data Protection Act, 2019

As a data subject under Kenyan law, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us using the information provided in Section 2.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements as stipulated by Kenyan law.

Typical retention periods include:

• Customer account information: Until account deletion request
• Order and transaction records: 7 years (as required by tax laws)
• Marketing communications data: Until consent withdrawal
• Website logs: 30 days for security purposes

9. Cookies and Tracking Technologies

Our website may use "cookies" to enhance user experience. Cookies are small files placed on your hard drive for record-keeping purposes and sometimes to track information about you. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent.

We use cookies for:

• Remembering user preferences
• Understanding how users interact with our site
• Improving website functionality
• Security purposes

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

11. Changes to This Privacy Policy

PHYCOMANIA PLC has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect.

You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.

12. Complaints

If you have any complaints about our data protection practices, you may contact the Office of the Data Protection Commissioner (ODPC) in Kenya. However, we encourage you to first contact us to resolve any concerns you may have.

13. Contacting Us

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us at: